CVE-2013-4406: Quick Tabs Module Project Quicktabs

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote attackers to obtain sensitive information by reading a Quick Tab.

Affected products

• Quick Tabs Module Project Quicktabs: version 6.x-3.0 only; version 6.x-3.1 only; version 6.x-3.x only; version 7.x-3.0 only; version 7.x-3.1 only; version 7.x-3.2 only; …

Published 2014-05-19. Last modified 2026-06-16.